Intrusion PreventionNovell.GroupWise.HTTP.Interfaces.Arbitrary.File.Retrieval
Description
This indicates an attack attempt against a Directory Traversal vulnerability in the HTTP interface of Novell GroupWise Post Office Agent, Message Transfer Agent and Internet Agent.
The vulnerability is caused by an design error when the vulnerability software handles a crafted HTTP request. A remote attacker can exploit this to gain unauthorized access to sensitive information.
Affected Products
Novell GroupWise Internet Agent 8.0.2 and prior
Novell GroupWise Message Transfer Agent 8.0.2 and prior
Novell GroupWise Post Office Agent 8.0.2 and prior
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://download.novell.com/Download?buildid=O5hTjIiMdMo~
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 34801 |
| Created | Mar 19, 2013 |
| Updated | Sep 05, 2018 |
| Risk |
|
| CVE ID | CVE-2012-0419 |
| Exploit Prediction Score | 96.49% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Novell |